Wireless baseband signal transmission with dynamic control logic to improve security robustness

- ROSEMOUNT AEROSPACE, INC.

Provided are embodiments for performing encryption and decryption in accordance with one or more embodiments. The embodiments include generating a random key address, obtaining a pre-stored key using the random key address, and re-arranging portions of the pre-stored key using the random key address. Embodiments also include selecting a dynamic logic operation based on the random key address, receiving data for encryption, and combining portions of the received data for encryption with the re-arranged portions of the pre-stored key using the dynamic logic operation to produce encrypted data. Embodiments include re-arranging portions of the encrypted data based on the random key address and combining the re-arranged portions of the encrypted data with the random key address into an encrypted data packet for transmission. Also provided are embodiments for a transmitter and receiver for performing the encryption and decryption.

Skip to: Description  ·  Claims  ·  References Cited  · Patent History  ·  Patent History
Description
CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims the benefit of Indian Application No. 201911029234 filed Jul. 19, 2019, which is incorporated herein by reference in its entirety.

BACKGROUND

The present invention generally relates to communications, and more specifically to techniques wireless baseband signal transmission with dynamic control logic to improve security robustness.

Wireless avionics intra-communication (WAIC) technology can be used in different environments for communicating various information. For example, WAIC can be used in an aircraft environment to communicate sensor information such as that related to temperature, pressure, airflow, etc. However, data must be exchanged in a secure fashion to ensure that the data is not intercepted. There may be a need to efficiently secure wireless data that is transmitted in various environments.

BRIEF DESCRIPTION

According to an embodiment, a method for encryption is provided. The method includes generating a random key address; obtaining a pre-stored key using the random key address; re-arranging portions of the pre-stored key using the random key address; selecting a dynamic logic operation based on the random key address; receiving data for encryption; combining portions of the received data for encryption with the re-arranged portions of the pre-stored key using the dynamic logic operation to produce encrypted data; re-arranging portions of the encrypted data based on the random key address; and combining the re-arranged portions of the encrypted data with the random key address into an encrypted data packet for transmission.

In addition to one or more of the features described herein, or as an alternative, further embodiments include a random number generator that generates a 12-bit random key address.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a first portion of the random key address to generate key displacement logic to re-arrange portions of the pre-stored key.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using the first portion of the random key address to perform byte displacement of the combined data.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a second portion of the random key address to generate a dynamic logic operator used to encrypt the data, wherein the first portion and the second portion of the random key that do not overlap.

In addition to one or more of the features described herein, or as an alternative, further embodiments include an encryption process is a hardware-based encryption process.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using the encrypted data packet to communicate in an avionics system.

According to another embodiment, a method for decryption is provided. The method includes receiving an encrypted data packet, wherein the data packet includes a random key address and encrypted data; obtaining a pre-stored key using the random key address; determining an arrangement of the pre-stored key used during encryption based on the random key address; selecting a dynamic logic operation used during encryption based on the random key address; determining an arrangement of the encrypted data used during encryption; and combining the arrangement of the pre-stored key with the arrangement of the encrypted data using the selected dynamic logic operation to decrypt the encrypted data.

In addition to one or more of the features described herein, or as an alternative, further embodiments include a random key that is generated at a different device.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a first portion of the random key address to generate key placement logic to arrange portions of the pre-stored key.

In addition to one or more of the features described herein, or as an alternative, further embodiments include a first portion of the random key address to perform byte placement of the combined data.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a second portion of the random key address to generate a dynamic logic operator used to decrypt the encrypted data, wherein the first portion and the second portion of the random key that do not overlap.

In addition to one or more of the features described herein, or as an alternative, further embodiments include a decryption process is a hardware-based decryption process.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using the decrypted data packet to communicate in an avionics system.

According to a different embodiment, a system includes a transmitter configured to generate a random key address; obtain a pre-stored key using the random key address; re-arrange portions of the pre-stored key using the random key address; select a dynamic logic operation based on the random key address; receive data for encryption; combine portions of the received data for encryption with the re-arranged portions of the pre-stored key using the dynamic logic operation to produce encrypted data; re-arrange portions of the encrypted data based on the random key address; and combine the re-arranged portions of the encrypted data with the random key address into an encrypted data packet for transmission. The system also includes a receiver configured to receive the encrypted data packet, wherein the data packet includes the random key address and the encrypted data; obtain the pre-stored key using the random key address; determine an arrangement of the pre-stored key used the transmitter during encryption based on the random key address; select a dynamic logic operation used by the transmitter during encryption based on the random key address; determine an arrangement of the encrypted data by the transmitter used during encryption; and combine the arrangement of the pre-stored key with the arrangement of the encrypted data using the selected dynamic logic operation to decrypt the encrypted data.

In addition to one or more of the features described herein, or as an alternative, further embodiments include a transmitter that includes a random generator to generate a 12-bit random key address.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a first portion of the random key address to generate key displacement logic to re-arrange portions of the pre-stored key.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a first portion of the random key address to perform byte displacement of the combined data.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a second portion of the random key address to generate a dynamic logic operator used to encrypt the data.

In addition to one or more of the features described herein, or as an alternative, further embodiments include using a first portion and a second portion of the random key that do not overlap.

Technical effects of embodiments of the present disclosure include a hardware solution configured to increase wireless security of data.

The foregoing features and elements may be combined in various combinations without exclusivity, unless expressly indicated otherwise. These features and elements, as well as the operation thereof, will become more apparent in light of the following description and the accompanying drawings. It should be understood, however, that the following description and drawings are intended to be illustrative and explanatory in nature and non-limiting.

BRIEF DESCRIPTION OF THE DRAWINGS

The following descriptions should not be considered limiting in any way. With reference to the accompanying drawings, like elements are numbered alike:

FIG. 1 depicts a transmitter for encrypting data in accordance with one or more embodiments;

FIG. 2 depicts a receiver for decrypting data in accordance with one or more embodiments;

FIG. 3 depicts a system in accordance with one or more embodiments;

FIG. 4 depicts encryption process for encrypting data in accordance with one or more embodiments;

FIG. 5 depicts a flowchart of a process for encrypting data in accordance with one or more embodiments;

FIG. 6 depicts a decryption process for decrypting data in accordance with one or more embodiments;

FIG. 7 depicts a flowchart of a process for decrypting data in accordance with one or more embodiments;

FIG. 8 depicts a table of an example configuration for the key byte replacement logic in accordance with one or more embodiments;

FIG. 9 depicts a table of an example configuration for the dynamic logical operators in accordance with one or more embodiments; and

FIG. 10 depicts a table of an example configuration for a byte placement and displacement logic displacement in accordance with one or more embodiments.

 DETAILED DESCRIPTION

WAIC has been allocated frequency spectrum of 4.2 to 4.4 GHz by the ITU. Encryption is possible using software or hardware techniques. Hardware encryption is considered to be safer and much more difficult to intercept. Encryption according to the techniques described herein occurs in the hardware chip level. A random number generator generates a key address which is used to index into one or more tables that are stored at both the transmitter and receiver to perform the encryption and description, respectively. By avoiding the transmission of the encryption key and using a random key instead the security of the encryption is increased.

In FIG. 1, a device 100 for performing encryption-decryption in accordance with one or more embodiments is shown. As shown, wireless transmitter device 100 (hereinafter referred to as transmitter 100) includes a baseband module 110. The baseband module 110 includes a random number generator. In one or more embodiments, the random number generator generates 12-bit random key address which is used to generate an address for a 4k memory location of the on-chip memory ROM to get a pre-stored 32-bit key. The transmitter 100 includes a key displacement logic (KPL). The key displacement logic is used to re-arrange portions of the obtained pre-stored key. In one example, the pre-stored 32-bit key can be divided into four 1-byte (8-bits) chunks where each byte can be re-arranged which is further discussed with reference to FIGS. 4 and 5.

The transmitter 100 includes a dynamic logic operator (DLO). The dynamic logic operator provides different combinations of logical operations using operators such as the XNOR or XOR logic to encrypt the data. The combinations can be selected by the dynamic logic operator using a portion of 12-bit key address.

The transmitter 100 also includes an RF module, ROM, and interface. The transmitter 100 includes a microprocessor/microcontroller 130, RAM/ROM 140, and sensor interface 150. It should be understood the transmitter 100 can include other modules and components.

FIG. 2 depicts a receiver for performing decryption in accordance with one or more embodiments. As shown, the receiver 200 includes similar components as the transmitter 100 shown in FIG. 1. For example, the receiver 200 includes a baseband module 210. The receiver 200 is configured to with the same tables that are used to encrypt the data packet and is operated to reverse the encryption process based on the key address generated by the random number generator of the transmitter 100. The decryption process is discussed with reference to FIGS. 6 and 7. The receiver 200 also includes an RF module, ROM, and interface. The receiver 200 includes a microprocessor/microcontroller 230, RAM/ROM 240, and sensor interface 250. It should be understood the receiver 200 can include other modules and components

FIG. 3 depicts a system for communicating using the encryption-decryption techniques in accordance with one or more embodiments. The sensor nodes 1-6 can correspond to sensors of an avionics sensor that can be used to communicate various data to an aircraft such as temperature, pressure, airflow data, etc. The coordinator of FIG. 3 can correspond to an aircraft controller that is configured to communicate wirelessly with the sensor nodes 1-6 and other systems.

Now referring to FIG. 4, an encryption process 400 for encrypting data in accordance with one or more embodiments is shown. The random number generator 402 is used to generate a 12-bit key address which is used to obtain a pre-stored key from the ROM 404. As shown, the pre-stored key from the ROM 404 can be divided into four 1-byte portions (KD8-KD1; KD16-KD9; KD24-KD17; KD32-KD25). The key displacement logic 406 re-arranges the 1-byte portions using the key address. In one example, the key displacement logic 406 uses bits [5:1] of the key address to obtain the key displacement information from a table such as table 800 shown in FIG. 8. Table 800 shown how each byte is mapped after the replacement logic which is based on the key address.

The dynamic logic operator 408 uses part of the key address to select the dynamic operation to encrypt the transmission data 410. For example, bits [9:6] are used to select the operation according to table 900 shown in FIG. 9. The table includes XNOR (Xn) and XOR (X) logic for each logical operator LO4, LO3, LO2, and LO1. As shown in FIG. 4, each byte of the displaced key is combined with a byte of the transmission data 410 according to the corresponding logical operator to generate encrypted data A, B, C, and D. Subsequently each portion of the encrypted data is provided to the byte displacement logic 412 which re-arranges the encrypted data based on a portion of the key address [5:1]. For example, A, B, C, and D are mapped to Z, Y, X, and W, respectively. The table 1000 of FIG. 10 can be used to generate the various placements for the portions of data. Finally, each portion of the encrypted data is combined with the key address to form the packet 414 for transmission. FIG. 5 provides a flowchart of the encryption process 500 that occurs in FIG. 4.

Now referring to FIG. 6, a decryption process 600 is shown. The encrypted packet 602 is received which includes the encrypted data Z, Y, X, and W and the key address. The key address is used to access the pre-stored key from the ROM 604, byte placement for the data packets, key placement for the pre-stored key, and the dynamic logic operators that were used by the transmitter 100 to encrypt the data. As shown in FIG. 6, the key address is used to obtain the pre-stored key from table 800 shown in FIG. 8 and obtains the portions of the pre-stored key (KD8-KD1; KD16-KD9; KD24-KD17; KD32-KD25). The key placement logic uses the key address [5:1] to re-arrange the pre-stored key. The dynamic logic operator 606 uses a portion of the key address [9:6] to select the logic operators that were used to encrypt the data by the transmitter 100. The dynamic logic operator 606 uses the key address to perform the operation according to table 900 shown in FIG. 9.

The byte placement logic 610 used a portion of the key address [5:1] to re-arrange the packet data prior to performing the decryption. The byte placement logic 610 refers to the table 1000 of FIG. 10 to determine the proper placement of the data. The decryption is performed by combining the re-arranged portions of the pre-stored key with the re-arranged encrypted data using the corresponding logical operator to obtain the decrypted packet 612. A flowchart 700 is shown in FIG. 7 depicting the decryption process 600.

The technical effects and benefits include implementing a hardware encryption-decryption solution for wireless communication in a system such as an avionics system. The technical effects and benefits include using on-chip programmable keys which provide an indirect way of accessing the digital keys used for encryption-decryption. This provides a hardware solution that is very efficient and difficult to intercept. In an aircraft environment, each of the aircraft can be configured with a separate set of keys.

A detailed description of one or more embodiments of the disclosed apparatus and method are presented herein by way of exemplification and not limitation with reference to the Figures.

As described above, embodiments can be in the form of processor-implemented processes and devices for practicing those processes, such as a processor. Embodiments can also be in the form of computer program code containing instructions embodied in tangible media, such as network cloud storage, SD cards, flash drives, floppy diskettes, CD ROMs, hard drives, or any other computer-readable storage medium, wherein, when the computer program code is loaded into and executed by a computer, the computer becomes a device for practicing the embodiments. Embodiments can also be in the form of computer program code, for example, whether stored in a storage medium, loaded into and/or executed by a computer, or transmitted over some transmission medium, loaded into and/or executed by a computer, or transmitted over some transmission medium, such as over electrical wiring or cabling, through fiber optics, or via electromagnetic radiation, wherein, when the computer program code is loaded into an executed by a computer, the computer becomes an device for practicing the embodiments. When implemented on a general-purpose microprocessor, the computer program code segments configure the microprocessor to create specific logic circuits.

The term “about” is intended to include the degree of error associated with measurement of the particular quantity based upon the equipment available at the time of filing the application.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present disclosure. As used herein, the singular forms “a”, “an” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will be further understood that the terms “comprises” and/or “comprising,” when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, element components, and/or groups thereof.

While the present disclosure has been described with reference to an exemplary embodiment or embodiments, it will be understood by those skilled in the art that various changes may be made and equivalents may be substituted for elements thereof without departing from the scope of the present disclosure. In addition, many modifications may be made to adapt a particular situation or material to the teachings of the present disclosure without departing from the essential scope thereof. Therefore, it is intended that the present disclosure not be limited to the particular embodiment disclosed as the best mode contemplated for carrying out this present disclosure, but that the present disclosure will include all embodiments falling within the scope of the claims.

Claims

1. A method for encryption, the method comprising:

generating, by a random number generator, a random key address, wherein the random number generator generates a 12-bit random key address;
obtaining a pre-stored key using the random key address;
re-arranging portions of the pre-stored key using the random key address;
selecting a dynamic logic operation based on the random key address;
receiving data for encryption;
combining portions of the received data for encryption with the re-arranged portions of the pre-stored key using the dynamic logic operation to produce encrypted data;
re-arranging portions of the encrypted data based on the random key address; and
combining the re-arranged portions of the encrypted data with the random key address into an encrypted data packet for transmission.

2. The method of claim 1, wherein a first portion of the random key address is used to generate key displacement logic to re-arrange portions of the pre-stored key.

3. The method of claim 1, wherein the first portion of the random key address is used to perform byte displacement of the combined data.

4. The method of claim 3, wherein a second portion of the random key address is used to generate a dynamic logic operator used to encrypt the data, wherein the first portion and the second portion of the random key do not overlap.

5. The method of claim 1, wherein the encryption is a hardware-based encryption.

6. The system of claim 1, wherein the encrypted data packet is used to communicate in an avionics system.

7. A method for decryption, the method comprising:

receiving an encrypted data packet, wherein the data packet includes a random key address and encrypted data, wherein the random key address is a 12-bit random key address;
obtaining a pre-stored key using the random key address;
determining an arrangement of the pre-stored key used during encryption based on the random key address;
selecting a dynamic logic operation used during encryption based on the random key address;
determining an arrangement of the encrypted data used during encryption; and
combining the arrangement of the pre-stored key with the arrangement of the encrypted data using the selected dynamic logic operation to decrypt the encrypted data.

8. The method of claim 7, wherein the random key is generated at a different device.

9. The method of claim 8, wherein a first portion of the random key address is used to generate key placement logic to arrange portions of the pre-stored key.

10. The method of claim 8, wherein the first portion of the random key address is used to perform byte placement of the combined data.

11. The method of claim 10, wherein a second portion of the random key address is used to generate a dynamic logic operator used to decrypt the encrypted data, wherein the first portion and the second portion of the random key do not overlap.

12. The method of claim 7, wherein the decryption is a hardware-based decryption.

13. The system of 7, wherein the decrypted data packet is used to communicate in an avionics system.

14. A system comprising:

a transmitter configured to: generate a random key address, wherein the transmitter further comprises a random generator to generate a 12-bit random key address; obtain a pre-stored key using the random key address; re-arrange portions of the pre-stored key using the random key address; select a dynamic logic operation based on the random key address; receive data for encryption; combine portions of the received data for encryption with the re-arranged portions of the pre-stored key using the dynamic logic operation to produce encrypted data; re-arrange portions of the encrypted data based on the random key address; and
combine the re-arranged portions of the encrypted data with the random key address into an encrypted data packet for transmission; and
a receiver configured to:
receive the encrypted data packet, wherein the data packet includes the random key address and the encrypted data;
obtain the pre-stored key using the random key address;
determine an arrangement of the pre-stored key used the transmitter during encryption based on the random key address;
select a dynamic logic operation used by the transmitter during encryption based on the random key address;
determine an arrangement of the encrypted data by the transmitter used during encryption; and
combine the arrangement of the pre-stored key with the arrangement of the encrypted data using the selected dynamic logic operation to decrypt the encrypted data.

15. The system of claim 14, wherein a first portion of the random key address is used to generate key displacement logic to re-arrange portions of the pre—stored key.

16. The system of claim 14, wherein the first portion of the random key address is used to perform byte displacement of the combined data.

17. The system of claim 16, wherein a second portion of the random key address is used to generate a dynamic logic operator used to encrypt the data.

18. The system of claim 17, wherein the first portion and the second portion of the random key do not overlap.

Referenced Cited
U.S. Patent Documents
8811616 August 19, 2014 Cobos
9178567 November 3, 2015 Klein et al.
9323499 April 26, 2016 Hyde et al.
20020199131 December 26, 2002 Kocin
20050226408 October 13, 2005 Hotz
20080072073 March 20, 2008 Yang
20080192928 August 14, 2008 Yu et al.
20080285747 November 20, 2008 Kim
20100211787 August 19, 2010 Bukshpun et al.
20110001531 January 6, 2011 Nishi et al.
20120306858 December 6, 2012 Song
20160335295 November 17, 2016 Desai
20180217942 August 2, 2018 Fons et al.
20190319786 October 17, 2019 Das et al.
20200252378 August 6, 2020 Nath
20210119978 April 22, 2021 Nath et al.
Foreign Patent Documents
2004012384 February 2004 WO
Other references
  • Al-Ghamdi, Maimoona, Manal Al-Ghamdi, and Adnan Gutub. “Security enhancement of shares generation process for multimedia counting-based secret-sharing technique.” Multimedia Tools and Applications 78.12 (2019): 16283-16310. (Year: 2019).
  • Akram et al., “An Efficent, Secure and Trusted CHannel Protocol for Avionics Wireless Networks,” Cornell University Library, Aug. 14, 2016, 10 pages.
  • European Search Report; European Application No. 19211155.7; Filed: Nov. 25, 2019; dated May 4, 2020; 11 pages.
  • Menezes et al., “Chapter 7: Block Ciphers” Handbook of Applied Cryptography; Press Series on Discrete Mathematices and its Applications, CRC Press, Oct. 1, 1996, pp. 223-282.
  • Smith et al., “Economy Class Crypto: Exploring Weak Cipher Usage in Avionic Communications via ACARS,” International Conference on Financial Cryptography and Data Security, Dec. 23, 2017, pp. 285-301.
  • Extended European Search Report for European Patent Application No. 20199931.5 dated Mar. 11, 2021, 7 pages.
  • U.S. Final Office Action for U.S. Appl. No. 16/724,557, dated Jan. 11, 2022, 13 pages.
  • U.S. Non-Final Office Action for U.S. Appl. No. 16/724,557, dated Sep. 7, 2021, 24 pages.
  • U.S. Notice of Allowance for U.S. Appl. No. 16/724,557, dated Apr. 1, 2022, 13 pages.
Patent History
Patent number: 11470471
Type: Grant
Filed: Sep 16, 2019
Date of Patent: Oct 11, 2022
Patent Publication Number: 20210021992
Assignee: ROSEMOUNT AEROSPACE, INC. (Burnsville, MN)
Inventors: Pranay Kanti Nath (Karnataka), Pullaiah Dussa (Bangalore)
Primary Examiner: Shawnchoy Rahman
Application Number: 16/571,294
Classifications
Current U.S. Class: Of Power Supply (714/14)
International Classification: H04L 29/06 (20060101); H04W 12/033 (20210101); H04W 12/041 (20210101); H04L 9/08 (20060101); H04W 84/18 (20090101);